Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: hmwpuTmMYX2EctQq42fIW2LZKD2FKQHQwAhat0KfKSg=
Subject key identifier: E2:EC:53:72:08:A9:24:3B:3D:9E:A5:1C:3C:18:86:EC:93:BA:6A:D2
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 0193579BE6585673577302EA910C1573A6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 01B9
Signing time: Sat 23 Nov 2024 06:00:54 +0000
Manifest this update: Sat 23 Nov 2024 06:00:54 +0000
Manifest next update: Sun 24 Nov 2024 06:00:54 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: gngG7YZa3ANoI+6VmH4YoUyOzZMPNsc/Kn6/GN4lRbU=)
2: uvAID9R39i1wRizeDQrywnPI9tM.roa (hash: dXWWFsozrFUCla9hGKHR+QeGhCEpW3J7kzoWnOfn7Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:e6:58:56:73:57:73:02:ea:91:0c:15:73:a6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Nov 23 06:00:54 2024 GMT
Not After : Nov 24 06:00:54 2024 GMT
Subject: CN=e2ec537208a9243b3d9ea51c3c1886ec93ba6ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:ac:cb:cf:f3:2f:67:de:30:1d:c2:8d:eb:
61:05:13:3d:a8:7e:32:6b:31:ed:77:8a:9b:3e:e5:
76:1f:1e:02:ab:ad:a8:d9:08:8a:d2:31:f3:d6:7a:
5e:73:12:b9:9f:d2:c8:a8:92:65:ad:cb:80:01:b4:
39:f8:5d:99:e6:19:67:7e:ad:4f:68:cc:b4:85:3d:
26:02:df:75:35:c2:4d:2f:98:2f:c8:26:1e:33:de:
8e:31:44:c9:81:b5:fc:96:49:8a:66:cc:31:bc:b6:
79:e3:73:78:b3:4b:f5:1f:d3:c6:9f:46:26:9b:f7:
73:4c:03:85:87:c4:11:e4:6a:2f:18:a1:05:f1:a8:
ef:82:70:a4:17:b9:4b:dd:cf:ed:e6:8d:83:a5:d8:
91:82:a4:46:5f:66:fb:3e:d6:e1:3e:0d:8a:1f:3c:
a8:9a:5b:25:f3:4b:b0:73:6a:6c:7b:b2:5c:70:fa:
23:33:fb:13:b6:d8:3c:37:a0:7a:ee:43:3f:3d:a2:
f7:b3:2a:09:8f:e1:7c:e7:05:07:76:82:c3:9f:8b:
95:03:35:c8:52:c2:e7:4d:35:93:2a:af:11:bf:0a:
10:47:f7:32:aa:e0:c6:68:05:f6:06:d9:fe:fb:ab:
1f:2f:7f:ec:39:6c:03:d6:ab:5f:4b:44:2c:13:19:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EC:53:72:08:A9:24:3B:3D:9E:A5:1C:3C:18:86:EC:93:BA:6A:D2
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ec:14:c5:1b:17:28:73:e0:af:8c:71:85:3e:d8:c5:08:e3:
f4:b9:12:8d:7a:02:35:90:ef:f4:32:ab:6d:61:e5:23:71:70:
19:30:bc:50:6b:1b:81:b5:f4:d9:b7:04:ce:99:81:a7:ab:3e:
10:02:1c:7b:c1:2c:35:81:b9:2e:25:bb:d4:47:31:35:15:70:
d7:20:08:a8:c9:db:a4:b1:7b:f7:3c:a0:1b:98:c6:29:e1:2d:
e5:12:4b:4e:e4:76:06:1f:8b:40:aa:ed:ab:e4:24:5f:62:fb:
2f:16:a1:3f:1c:a1:e7:4f:ec:d6:93:d5:2b:23:5a:c6:8b:b0:
f4:8d:0f:06:86:59:82:81:ac:4a:5a:de:d4:02:54:3d:cb:f0:
e9:8e:c9:0a:4c:46:24:43:31:bd:eb:0e:e7:36:34:33:fe:2c:
0a:05:82:82:25:50:26:22:e6:b8:bf:8d:cc:e7:4a:a2:49:4b:
86:d9:f7:be:37:5b:4d:01:06:bd:88:94:25:2b:c1:f7:43:55:
ec:28:bc:c8:7e:04:89:3f:8b:c9:0d:89:c1:46:bf:52:ae:dc:
f9:e8:e0:d5:57:be:28:2d:e7:0b:60:5d:5a:99:5f:b6:4a:5a:
9e:1a:f1:96:95:7b:04:48:48:d6:a8:54:cf:ef:06:8e:a0:d9:
09:fe:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:49:30 2024 by rpki-client on console-ams.rpki-client.org